Struct tlspuffin::tls::rustls::sign::Ed25519SigningKey

struct Ed25519SigningKey {
    key: Arc<Ed25519KeyPair>,
    scheme: SignatureScheme,
}

A SigningKey that uses exactly one TLS-level SignatureScheme and one ring-level signature::SigningAlgorithm.

Compare this to RsaSigningKey, which for a particular key is willing to sign with several algorithms. This is quite poor cryptography practice, but is necessary because a given RSA key is expected to work in TLS1.2 (PKCS#1 signatures) and TLS1.3 (PSS signatures) – nobody is willing to obtain certificates for different protocol versions.

Currently this is only implemented for Ed25519 keys.

Fields

key: Arc<Ed25519KeyPair>

scheme: SignatureScheme

Implementations

impl Ed25519SigningKey

fn new(der: &PrivateKey, scheme: SignatureScheme) -> Result<Self, SignError>

Make a new Ed25519SigningKey from a DER encoding in PKCS#8 format, expecting a key usable with precisely the given signature scheme.

Trait Implementations

impl SigningKey for Ed25519SigningKey

fn choose_scheme(
    &self,
    offered: &[SignatureScheme],
    _rng: Box<dyn SecureRandom + Send + Sync>
) -> Option<Box<dyn Signer>>

Choose a SignatureScheme from those offered.

fn algorithm(&self) -> SignatureAlgorithm

What kind of key we have.